DeutschShown in its original language — a full translation is planned for a future version.
Google Android: Mehrere Schwachstellen ermöglichen Privilegieneskalation
view advisory published 2022-03-07
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, beliebigen Code zur Ausführung zu bringen und einen Denial-of-Service-Zustand auszulösen.
01
describes (80)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-30299US | — | — | ||
Possible out of bound access in audio module due to lack of validation of user provided input. | ||||
| CVE-2021-35117US | critical9.1 | — | ||
An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon In… | ||||
| CVE-2021-35110US | high8.8 | — | ||
Possible buffer overflow to improper validation of hash segment of file while allocating memory in Snapdragon Connectivity, Snapdragon Mobile | ||||
| CVE-2021-35106US | high7.8 | — | ||
Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon I… | ||||
| CVE-2021-35105US | high7.8 | — | ||
Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, S… | ||||
| CVE-2021-35103US | high7.8 | — | ||
Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn… | ||||
| CVE-2021-35088US | critical9.1 | — | ||
Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… | ||||
| CVE-2021-30333US | high7.8 | — | ||
Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna… | ||||
| CVE-2021-30332US | high7.5 | — | ||
Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile | ||||
| CVE-2021-30331US | medium5.5 | — | ||
Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co… | ||||
| CVE-2021-30329US | high7.5 | — | ||
Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile | ||||
| CVE-2021-30328US | high7.5 | — | ||
Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT… | ||||
| CVE-2021-1950US | high7.8 | — | ||
Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon In… | ||||
| CVE-2021-1942US | high8.8 | — | ||
Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, S… | ||||
| CVE-2021-39793US | high7.8OT critical | KEV | ||
In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with… | ||||
| CVE-2021-39792US | medium4.1 | — | ||
In usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read due to a race condition. This could lead to local information disclosure with System… | ||||
| CVE-2021-39737US | critical9.8 | — | ||
Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A | ||||
| CVE-2021-39736US | medium6.7 | — | ||
In prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escala… | ||||
| CVE-2021-39735US | medium6.4 | — | ||
In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System… | ||||
| CVE-2021-39734US | high7.8OT elevated | — | ||
In sendMessage of OneToOneChatImpl.java (? TBD), there is a possible way to send an RCS message without permissions due to a missing permission check. This could lead to local esca… | ||||
showing 20 of 80
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan